Security update for mariadb

This update for mariadb to version 10.2.22 fixes the following issues:

Security issues fixed:

- CVE-2019-2510: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
- CVE-2019-2537: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
- CVE-2018-3284: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112377)
- CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
- CVE-2018-3277: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112391)
- CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
- CVE-2018-3200: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112404)
- CVE-2018-3185: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112384)
- CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
- CVE-2018-3173: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112386)
- CVE-2018-3162: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112415)
- CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
- CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
- CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
- CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
- CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
- CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
- CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security issues fixed:

- Fixed an issue where mysl_install_db fails due to incorrect basedir (bsc#1127027).
- Fixed an issue where the lograte was not working (bsc#1112767).
- Backport Information Schema CHECK_CONSTRAINTS Table.
- Maximum value of table_definition_cache is now 2097152.
- InnoDB ALTER TABLE fixes.
- Galera crash recovery fixes.
- Encryption fixes.
- Remove xtrabackup dependency as MariaDB ships a build in mariabackup so xtrabackup is not needed (bsc#1122475).
- Maria DB testsuite - test main.plugin_auth failed (bsc#1111859)
- Maria DB testsuite - test encryption.second_plugin-12863 failed (bsc#1111858)
- Remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
- remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
- Database corruption after renaming a prefix-indexed column (bsc#1120041)

Release notes and changelog:

- https://mariadb.com/kb/en/library/mariadb-10222-release-notes
- https://mariadb.com/kb/en/library/mariadb-10222-changelog/

This update was imported from the SUSE:SLE-15:Update update project.

Fixed bugs
bnc#1127027
mysql_install_db fails because basedir is incorrect
bnc#1112397
VUL-0: CVE-2018-3251: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
bnc#1112368
VUL-0: CVE-2018-3174: mysql: Client programs unspecified vulnerability (CPU Oct 2018)
bnc#1112391
VUL-0: CVE-2018-3277: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
bnc#1103342
VUL-0: CVE-2018-3064: mysql: InnoDB unspecified vulnerability (CPU Jul 2018)
bnc#1112421
VUL-0: CVE-2018-3143: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
bnc#1118754
mariadb: PerconaFT is AGPL and should be removed from the package
bnc#1120041
Planned mariadb 10.2.19 update cause corruption on some alter table statements
bnc#1112377
VUL-0: CVE-2018-3284: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
bnc#1101677
VUL-0: CVE-2018-3063: mysql: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges).
bnc#1101678
VUL-0: CVE-2018-3066: mysql: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options).
bnc#1013882
VUL-0: CVE-2016-9843: zlib: Big-endian out-of-bounds pointer
bnc#1111858
Maria DB testsuite - test encryption.second_plugin-12863 failed
bnc#1112432
VUL-0: CVE-2018-3282: mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)
bnc#1112417
VUL-0: CVE-2018-3156: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
bnc#1116686
VUL-0: mariadb: 10.2.19,10.0.35 security release, mariadb-c-connector: 3.0.7 release
bnc#1112404
VUL-0: CVE-2018-3200: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
bnc#1112386
VUL-0: CVE-2018-3173: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
bnc#1101676
VUL-0: CVE-2018-3058: mysql: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM).
bnc#1112384
VUL-0: CVE-2018-3185: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
bnc#1112415
VUL-0: CVE-2018-3162: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
bnc#1122198
VUL-0: mysql: Tracker bug for Oracle Critical Patch Update Advisory - January 2019
bnc#1112767
L3: MySQL logrotate not working
bnc#1122475
mariadb-test requires libmariadb_plugins
bnc#1111859
Maria DB testsuite - test main.plugin_auth failed
Selected Binaries
openSUSE Build Service is sponsored by